CVE-2017-7207

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

The mem_get_bits_rectangle function in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted PostScript document.

Metrics

CVSS 3.0 5.5/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.debian.org/security/2017/dsa-3838
http://www.ghostscript.com/cgi-bin/findgit.cgi?309eca4e0a31ea70dcc844812691439312dad091Issue Tracking, Patch, Third Party Advisory
http://www.securityfocus.com/bid/96995Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1039071
https://access.redhat.com/errata/RHSA-2017:2180
https://bugs.ghostscript.com/show_bug.cgi?id=697676Issue Tracking, Patch
https://security.gentoo.org/glsa/201708-06
http://www.debian.org/security/2017/dsa-3838
http://www.ghostscript.com/cgi-bin/findgit.cgi?309eca4e0a31ea70dcc844812691439312dad091Issue Tracking, Patch, Third Party Advisory
http://www.securityfocus.com/bid/96995Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1039071
https://access.redhat.com/errata/RHSA-2017:2180
https://bugs.ghostscript.com/show_bug.cgi?id=697676Issue Tracking, Patch
https://security.gentoo.org/glsa/201708-06

Timeline

Published: Mar 21, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-72087.1The decode_residual function in libavcodec in libav 9.21 allows remote attackers to cause a denial of service (buffer over-read) or obtain s CVE-2017-72095.5The dump_section_as_bytes function in readelf in GNU Binutils 2.28 accesses a NULL pointer while reading section contents in a corrupt binar CVE-2017-72105.5objdump in GNU Binutils 2.28 is vulnerable to multiple heap-based buffer over-reads (of size 1 and size 8) while handling corrupt STABS enum CVE-2017-721310.0Zoho ManageEngine Desktop Central before build 100082 allows remote attackers to obtain control over all connected active desktops via unspe CVE-2017-72149.8An issue was discovered in exception_wrapper.py in OpenStack Nova 13.x through 13.1.3, 14.x through 14.0.4, and 15.x through 15.0.1. Legacy CVE-2017-72156.1Cross site scripting in some view elements in the index filter tool in app/webroot/js/misp2.4.68.js and the organisation landing page in app CVE-2017-72166.5The Management Web Interface in Palo Alto Networks PAN-OS before 7.1.9 allows remote authenticated users to obtain sensitive information via CVE-2017-72174.3The Management Web Interface in Palo Alto Networks PAN-OS before 7.0.14 and 7.1.x before 7.1.9 allows remote attackers to write to export fi CVE-2017-72187.8The Management Web Interface in Palo Alto Networks PAN-OS before 7.1.9 allows remote authenticated users to gain privileges via unspecified CVE-2017-72198.8A heap overflow vulnerability in Citrix NetScaler Gateway versions 10.1 before 135.8/135.12, 10.5 before 65.11, 11.0 before 70.12, and 11.1 CVE-2017-72208.8OpenText Documentum Content Server allows superuser access via sys_obj_save or save of a crafted object, followed by an unauthorized "UPDATE CVE-2017-72218.8OpenText Documentum Content Server has an inadequate protection mechanism against SQL injection, which allows remote authenticated users to